Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: AuUxlkPHJnsV2OR/fwbM2/W5w8D+/x2xWK88lLlaMu8=
Subject key identifier: 0C:62:44:15:41:2D:0A:3B:63:86:95:81:A0:45:EA:C4:07:5D:63:FF
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 019D28169FCA8A39CEA7C4FDFABC712197BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 09E0
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: Q3uvcJk1aivu7ToH0eZwM2MePrY.roa (hash: j0i6DOSkvpYiLwStrAAsU53hjHyyfEDy63fjeik32sA=)
2: QBmUJCRtL8qMx8nsM_8h7M8Ntmk.roa (hash: oRqg090yxLTopHF59OGl/QFkoOTyNIVLSNChAWZxm8c=)
3: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: WnvtY0EQCw8lN59b1962DVHus5JHvob7WXTfUam4lKI=)
4: _6K6ekLgN63ACFr7Nc4QqX8mO9Q.roa (hash: GR7VM23RiAdX5cDnkEi212fYKZ9tRoD66kVKX08kLSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9f:ca:8a:39:ce:a7:c4:fd:fa:bc:71:21:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=0c624415412d0a3b63869581a045eac4075d63ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:c8:40:32:f3:ac:0f:ec:58:03:2b:22:aa:
c6:ba:af:fa:46:4c:f4:35:ef:28:61:96:35:84:c0:
f2:af:13:07:c8:ea:a0:3e:c1:2f:a7:b7:17:76:6e:
5d:6c:4e:00:77:1c:96:93:cb:ae:39:a2:96:b1:bf:
0f:68:b8:c3:50:e2:ed:96:78:c6:fd:4f:a7:a3:85:
3b:aa:25:04:0b:25:98:14:7a:79:e3:8e:5e:81:c1:
f3:6a:07:f5:10:b4:e6:85:79:e0:41:26:8c:67:ca:
62:06:44:7a:ae:b1:72:de:54:cb:2c:15:49:84:a6:
e2:2e:e6:23:ad:19:a2:fd:54:2f:43:29:86:38:20:
2d:00:fe:bd:de:39:d5:f8:ce:dc:62:23:15:8b:cf:
e5:50:27:32:d9:23:a5:5f:1d:4b:bf:2d:17:08:f6:
83:2c:e4:91:e6:1b:22:08:35:38:63:5a:db:68:98:
97:8d:c0:1f:1f:db:61:3b:a2:38:63:5a:8c:2c:86:
ff:cd:64:38:5a:54:24:44:ef:46:71:cd:44:6d:49:
3b:0e:d2:f8:12:ba:b5:62:8d:2e:08:af:65:cb:c9:
dd:e9:00:c0:bb:ee:42:cb:5d:30:1d:22:57:da:65:
ce:c2:f1:6e:ef:ea:27:e9:55:06:f3:42:ba:0d:ea:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:44:15:41:2D:0A:3B:63:86:95:81:A0:45:EA:C4:07:5D:63:FF
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:36:45:9f:31:3a:35:c3:b8:e1:6d:6e:fd:81:bf:ab:85:84:
5e:ee:20:20:53:1f:86:f0:fb:06:f4:1b:fd:c5:0f:fd:f3:89:
0b:cc:70:89:14:97:61:3b:4e:8f:7b:b0:a7:26:3b:6b:d7:8d:
4a:05:99:1e:f8:a2:a7:43:3e:26:cd:33:27:bb:05:c0:b0:08:
46:e3:b2:b7:42:68:30:d4:af:0f:88:a0:9a:30:34:f8:05:55:
90:b2:1b:51:63:8c:f6:98:3b:14:b5:1b:4b:23:98:96:6b:28:
52:be:f9:6e:ac:52:7c:c7:08:52:6c:85:9a:f3:1c:f3:c4:3d:
73:61:8d:0e:b9:7f:49:6e:1b:9a:0d:07:fa:95:bb:98:39:22:
5a:81:08:7f:d4:36:be:07:25:57:26:7a:bf:13:e2:12:9e:fe:
0e:9c:c7:d0:29:2a:6f:1e:6e:b2:d4:37:5d:32:26:a9:9b:8f:
bd:34:60:75:a1:59:67:89:73:4f:cb:3c:78:5d:c1:a1:ff:cf:
07:3a:46:7f:c4:47:f9:24:f3:4c:8a:bb:91:67:ef:3a:fa:f8:
c7:e8:4c:dd:f2:6b:61:20:75:22:76:da:af:75:28:d5:89:38:
d7:0a:4f:5c:da:a0:4c:9a:b9:bf:74:09:df:3c:ca:b6:35:74:
11:44:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:30 2026 by rpki-client